When the Panorama Plugin for Cisco TrustSec version 1.0.2 is running on a Panorama version earlier than 10.0.0, if you are pushing identical IP tags to multiple device groups, the Panorama Plugin for Cisco Trust Sec creates a message for each device group and sends it to configd. Because there are many mappings, the message is large, and creating and sending it takes time.

Workaround

: Put all device groups under a parent device group, and put the parent device group in the plugin notify group at

Panorama

Cisco TrustSec

Setup

Notify Groups

.